Glossary
Simple definitions and explanations of Kubernetes components, concepts, and security terms
API Server
The central management component that exposes the Kubernetes API
Container Escape
A security vulnerability where an attacker breaks out of a container to access the host system
CustomResourceDefinition
A way to extend Kubernetes by defining your own resource types
DaemonSet
Ensures a copy of a Pod runs on all or selected nodes in the cluster
Deployment
A controller that manages the desired state of Pods and ReplicaSets
etcd
The distributed key-value store that holds all Kubernetes cluster state
Ingress
Manages external HTTP/HTTPS access to services in the cluster
kube-proxy
A network proxy that runs on each node and maintains network rules for Services
Kubelet
The agent running on each node that manages Pods and containers
Pod
The smallest deployable unit in Kubernetes that can be created and managed
RBAC (Role-Based Access Control)
A method of regulating access to computer or network resources based on the roles of individual users
Service
An abstraction that exposes a set of Pods as a network service
ServiceAccount
An identity for processes running inside Pods to authenticate with the API server